Merge branch 'devops/log4j2-vulnerability-patch' into 'master'

Apply vulnerability patch to mitigate CVE-2021-44228

See merge request crafty-controller/crafty-commander!113
This commit is contained in:
xithical 2021-12-12 15:29:49 +00:00
commit 44297ffa44

View File

@ -2,6 +2,9 @@ FROM python:alpine
LABEL maintainer="Dockerfile created by Zedifus <https://gitlab.com/zedifus>"
# Security Patch for CVE-2021-44228
ENV LOG4J_FORMAT_MSG_NO_LOOKUPS=true
# Install Packages, Build Dependencies & Garbage Collect & Harden
# (Alpine Edge repo is needed because jre16 is new)
COPY requirements.txt /commander/requirements.txt